This message was deleted.

Hi, Adding my message here again. The customer domain is indeed added Hi Descope team, A new user was added to the a tenant for the first time and got an invite to log in through email. SSO is not enforced. Now they get the following error message when they try to log in after the initial sign up. What is going on?

Based on your description and the screenshots, the most likely sequence is: 1. User is invited via a flow that assumes or prefers SSO 2. User completes initial signup 3. Later login attempt routes through SSO again 4. Descope checks domain → no active IdP mapping → blocked SSO not being “enforced” does not prevent this. Please bear with me as I take a closer look at this. Can you share the project ID for the project in which this issue is occurring?

Sure thank you

P2zMBz3fafJWhp450i76N3YBiMZA

This is with the Sign In flow, correct?

Correct The user is trying to sign in via email

A couple of questions to help me troubleshoot: • Are you able to reproduce this behavior? • Could you possibly provide a HAR file for this behavior if you can reproduce it? • Also, could you export and share this flow? The current sign-in flow that I have access to looks a bit different than the shared screenshots.

Hi Nick, This issue is currently happening to our customer again and again. I can ask him for an HAR file,but please reach out to me in a private message so i could share it after it is provided to me And what flow exactly would you like for me to share?

@Adar Shabtai - can you share the tenant ID of the applicable tenant? I think the redirect URL within the SSO tenant settings is likely pointing at the wrong project or the wrong flow - feel free to DM it if you're uncomfortable sharing here. Can start a thread with Nick and I.

Thank you @Chris Carper! Our R&D team is also investigating this internally and we will keep you posted. Thanks for the help